security-patterns

Implement JWT authentication and security patterns for hardened applications.

Updated Dec 4, 2025

Search Tags:#authorization #security #authentication #owasp #llm-safety #pii-masking

Ready to run

npx skills add https://github.com/hiroto0701/dotfiles --skill security-patterns-hiroto0701

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/hiroto0701/dotfiles/tree/main/private_dot_claude/skills/security-patterns
Command: npx skills add https://github.com/hiroto0701/dotfiles --skill security-patterns-hiroto0701

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive security patterns to build hardened applications, protecting against common vulnerabilities and ensuring data privacy.

Core Features & Use Cases

Secure Authentication: Implement robust authentication using JWT, OAuth 2.1, and Passkeys.
Defense-in-Depth: Design multi-layer security architectures and zero-trust principles.
Input Validation: Prevent injection attacks with schema validation (Zod/Pydantic) and sanitization.
LLM Safety: Defend against prompt injection and ensure PII masking.
Use Case: When developing a new web application, use these patterns to implement secure user registration, protect against OWASP Top 10 vulnerabilities, and ensure sensitive data is handled correctly.

Quick Start

Use the security-patterns skill to implement JWT authentication with access and refresh tokens.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure JWT authentication with access and refresh tokens?▼

Implement JWT authentication with access and refresh tokens by applying robust authentication patterns. This skill provides the design logic to generate secure user registration flows and protect against OWASP Top 10 vulnerabilities.

What is defense-in-depth and how does it apply to zero-trust architectures?▼

Defense-in-depth in zero-trust architectures involves designing multi-layer security architectures. This skill provides patterns to enforce multiple security controls, ensuring application protection even if one layer is breached.

How do I prevent injection attacks using schema validation with Zod or Pydantic?▼

Prevent injection attacks using schema validation with Zod or Pydantic by applying input validation and sanitization patterns. This skill provides the logic to enforce strict data conformity before processing.

Can I use this skill to defend against prompt injection and mask PII in LLM applications?▼

Yes, you can defend against prompt injection and mask PII in LLM applications. This skill provides LLM safety patterns to ensure sensitive data is handled correctly and redacted before processing.

Does this skill support OAuth 2.1 and Passkeys for secure authentication?▼

Yes, this skill supports OAuth 2.1 and Passkeys for secure authentication. It provides comprehensive patterns to implement robust authentication flows for new web applications.

What is the best way to protect against OWASP Top 10 vulnerabilities when building a new web application?▼

The best way to protect against OWASP Top 10 vulnerabilities is to apply comprehensive security patterns. This skill provides the logic for secure authentication, input validation, and defense-in-depth principles from the start.